A public letter to CloudFlare to fix their snoopy vendor

Re:A public letter to CloudFlare to fix their snoopy vendor by ec109685 on Friday January 07, 2022 @01:20PM (#29842666)

That doesn't make sense. If I hit amazon.com on my browser, which is IPv4 only, t-mobile needs to provide a (private) IPv4 IP to the phone to make that possible.

Edit: was totally wrong about this: https://www.internetsociety.org/resources/deploy360/2014/cas...

iOS (since IOS 12) and Android have native clients that can tunnel IPv4 requests over an IPv6 only network that are used for providers like T-Mobile.

[ Parent | on HN ]

Re:A public letter to CloudFlare to fix their snoopy vendor by Sohcahtoa82 on Friday January 07, 2022 @01:41PM (#29842961)

Not necessarily.

T-Mobile could respond to DNS requests with an IPv6 address that includes an encoding of Amazon.com's IPv4 address in it so that when you try to connect it it, the gateway knows what IP address you're looking for and can do the NATing there.

Of course, this is just conjecture about a possible way of making it work, and it could easily get broken if you configure your phone to use a different DNS server.

[ Parent | on HN ]

Re:A public letter to CloudFlare to fix their snoopy vendor by ec109685 on Friday January 07, 2022 @02:35PM (#29843657)

Thanks, that's a good point. Apple talks about it here: https://developer.apple.com/library/archive/documentation/Ne...

[ Parent | on HN ]